Page 17 of 266 results (0.007 seconds)

CVSS: 6.8EPSS: 0%CPEs: 102EXPL: 0

CVE-2009-2063

https://notcve.org/view.php?id=CVE-2009-2063

15 Jun 2009 — Opera, possibly before 9.25, processes a 3xx HTTP CONNECT response before a successful SSL handshake, which allows man-in-the-middle attackers to execute arbitrary web script, in an https site's context, by modifying this CONNECT response to specify a 302 redirect to an arbitrary https web site. Opera, posiblemente en versiones anteriores a v9.25, procesa una respuesta 3xx HTTP CONNECT antes de un proceso de handshake SSL exitoso, lo que permitiría a atacantes "man-in-the-middle" ejecutar secuencias de coma... • http://research.microsoft.com/apps/pubs/default.aspx?id=79323 • CWE-287: Improper Authentication •

CVSS: 7.4EPSS: 0%CPEs: 21EXPL: 0

CVE-2009-2067

https://notcve.org/view.php?id=CVE-2009-2067

15 Jun 2009 — Opera detects http content in https web pages only when the top-level frame uses https, which allows man-in-the-middle attackers to execute arbitrary web script, in an https site's context, by modifying an http page to include an https iframe that references a script file on an http site, related to "HTTP-Intended-but-HTTPS-Loadable (HPIHSL) pages." Opera detecta contenido http en una página https, sólo cuando el marco de alto nivel utiliza https, lo que permite a los atacantes "hombre en el medio" ejecutar... • http://research.microsoft.com/apps/pubs/default.aspx?id=79323 • CWE-287: Improper Authentication •

CVSS: 7.5EPSS: 16%CPEs: 2EXPL: 2

CVE-2009-1234 – Opera 9.64 - 7400 nested elements XML Parsing Remote Crash

https://notcve.org/view.php?id=CVE-2009-1234

02 Apr 2009 — Opera 9.64 allows remote attackers to cause a denial of service (application crash) via an XML document containing a long series of start-tags with no corresponding end-tags. NOTE: it was later reported that 9.52 is also affected. Opera versión 9.64, permite a los atacantes remotos causar una denegación de servicio (bloqueo de aplicación) por medio de un documento XML que contiene una serie larga de etiquetas de inicio sin las etiquetas finales correspondientes. NOTA: más tarde se informó que la versión 9.5... • https://www.exploit-db.com/exploits/8320 • CWE-20: Improper Input Validation •

CVSS: 9.3EPSS: 10%CPEs: 115EXPL: 0

CVE-2009-0914

https://notcve.org/view.php?id=CVE-2009-0914

16 Mar 2009 — Opera before 9.64 allows remote attackers to execute arbitrary code via a crafted JPEG image that triggers memory corruption. Opera en versiones anteriores a v9.64 permite a atacantes remotos ejecutar código de su elección mediante una imagen JPEG manipulada que provoca una corrupción de la memoria. • http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html • CWE-399: Resource Management Errors •

CVSS: 10.0EPSS: 1%CPEs: 115EXPL: 0

CVE-2009-0916

https://notcve.org/view.php?id=CVE-2009-0916

16 Mar 2009 — Unspecified vulnerability in Opera before 9.64 has unknown impact and attack vectors, related to a "moderately severe issue." Vulnerabilidad no especificada en Opera versión anterior a v9.64 tiene un impacto y vectores de ataque desconocidos, relacionados con un "asunto moderadamente severo". • http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html •

CVSS: 6.8EPSS: 1%CPEs: 1EXPL: 0

CVE-2009-0915

https://notcve.org/view.php?id=CVE-2009-0915

16 Mar 2009 — Opera before 9.64 allows remote attackers to conduct cross-domain scripting attacks via unspecified vectors related to plug-ins. Opera en versiones anteriores a v9.64 permite a atacantes remotos dirigir ataques de ejecución de secuencias de comandos en dominios cruzados mediante vectores no especificados relacionados con sus extensiones. • http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 7.5EPSS: 0%CPEs: 114EXPL: 0

CVE-2008-5681

https://notcve.org/view.php?id=CVE-2008-5681

19 Dec 2008 — Opera before 9.63 does not block unspecified "scripted URLs" during the feed preview, which allows remote attackers to read existing subscriptions and force subscriptions to arbitrary feed URLs. Opera en versiones anteriores a la 9.63, no bloquea "URLs en scripts" durante la vista previa de servicios de suscipción a noticias, lo que permite a atacantes remotos leer las suscripciones y forzar suscripciones a URLs de noticias. • http://secunia.com/advisories/34294 •

CVSS: 6.1EPSS: 0%CPEs: 114EXPL: 0

CVE-2008-5682

https://notcve.org/view.php?id=CVE-2008-5682

19 Dec 2008 — Cross-site scripting (XSS) vulnerability in Opera before 9.63 allows remote attackers to inject arbitrary web script or HTML via built-in XSLT templates. Una vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados en Opera en versiones anteriores a 9.63 permite a atacantes remotos inyectar HTML o secuencias de comandos web arbitrarios a través de plantillas XSLT pre-instaladas. • http://osvdb.org/50951 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 7.8EPSS: 0%CPEs: 114EXPL: 0

CVE-2008-5683

https://notcve.org/view.php?id=CVE-2008-5683

19 Dec 2008 — Unspecified vulnerability in Opera before 9.63 allows remote attackers to "reveal random data" via unknown vectors. Una vulnerabilidad sin especificar en Opera 9.63 permite antes de atacantes remotos "revelar datos aleatorios" a través de vectores desconocidos. • http://secunia.com/advisories/34294 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •

CVSS: 9.3EPSS: 19%CPEs: 114EXPL: 1

CVE-2008-5680 – Opera 9.62 - 'file://' Local Heap Overflow

https://notcve.org/view.php?id=CVE-2008-5680

19 Dec 2008 — Multiple buffer overflows in Opera before 9.63 might allow (1) remote attackers to execute arbitrary code via a crafted text area, or allow (2) user-assisted remote attackers to execute arbitrary code via a long host name in a file: URL. NOTE: this might overlap CVE-2008-5178. Múltiples desbordamientos de búfer en versiones de Opera anteriores a la 9.63 podrían permitir (1) a atacantes remotos ejecutar código arbitrario a través de un textarea convenientemente modificada, o permitir (2) con ayuda de los usu... • https://www.exploit-db.com/exploits/7135 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •